Problem with faked-system-time option

Jerome Baum jerome at jeromebaum.com
Thu Jun 16 01:51:39 CEST 2011


>> I repudiate this timestamp!  I
>> don't trust Honest Al's Timestamping Service any
>> more!")
>
> Fair enough. But is it so easy to repudiate something like
> http://guardtime.com/publications/ ?

A bit OT but: I looked at those guys a while ago and I don't think I
quite understand their concept. So, they publish hashes in the
newspaper -- all fine and good, in a sense better than what stamper
does. Problem is, how do I go from that hash to verifying a timestamp
without their cooperation? With stamper I can just archive the
published signatures and be done. With guardtime, as far as I can see
they would have to send over the entire hash tree -- which isn't
published, so I'd have to ask for/subpoena it -- just for a simple
verification?

-- 
Jerome Baum
tel +49-1578-8434336
email jerome at jeromebaum.com
web www.jeromebaum.com
--
PGP: A0E4 B2D4 94E6 20EE 85BA E45B 63E4 2BD8 C58C 753A
PGP: 2C23 EBFF DF1A 840D 2351 F5F5 F25B A03F 2152 36DA



More information about the Gnupg-users mailing list